http://h18000.www1.hp.com/products/quickspecs/13258_div/13258_div.html
http://h10010.www1.hp.com/wwpc/us/en/sm/WF31a/12169-304612-304622-304622-304622-3936307.html
- Provide specs of MSL tape library
HP Integrity blade products
http://h18004.www1.hp.com/products/blades/components/c-class-integrity-bladeservers.html
HP Blade enclosures
http://h18004.www1.hp.com/products/blades/components/enclosures/c-class/index.html
HP Blade answer center
http://h30424.www3.hp.com/index.html?bpKey=Blades_Content_Menu#sc=&rm=598&sp=
HP Blade system power sizer
http://h71028.www7.hp.com/ActiveAnswers/cache/347628-0-0-0-121.html
HP Storage
http://h18000.www1.hp.com/products/quickspecs/12893_div/12893_div.html
Oracle
Weblogic server installation guide
http://download.oracle.com/docs/cd/E15523_01/doc.1111/e14142/prepare.htm#i1183981
20100701
20100630
Installing perl modules online
- need internet access to linux box
sudo perl -MCPAN -e 'install Config::IniFiles'
>>>> before that
#yum install perl-CPAN
>>> configure CPAN
# cpan
>> configure most of the steps in cpan
or from cpan
# cpan
cpan shell -- CPAN exploration and modules installation (v1.9205)
ReadLine support available (maybe install Bundle::CPAN or Bundle::CPANxxl?)
cpan[1]> install "Config::IniFiles";
sudo perl -MCPAN -e 'install Config::IniFiles'
>>>> before that
#yum install perl-CPAN
>>> configure CPAN
# cpan
>> configure most of the steps in cpan
or from cpan
# cpan
cpan shell -- CPAN exploration and modules installation (v1.9205)
ReadLine support available (maybe install Bundle::CPAN or Bundle::CPANxxl?)
cpan[1]> install "Config::IniFiles";
20100521
SSD - Solid State Devices
Solid states devices
Advantages:
Disadvantages:
SSD architecture and types:
NAND flash nonvolatile memory
Where is it used
Vendors and Martket share
When you hear Solid states devices, first point to loot is they are green.
Green , yeah they are engery efficient, fast, low form factor, best suited for next generation servers.
SSD is a collection of memory chips combined with additional technologies that allow it to appear as a normal hard drive. No doubt technology was invented in 1980 and first NAND drive was manufactured in 1989, but use of this became more seen in early 2010.
Solid state drives are data storage devices that uses solid state memory to store persistant data.
Advantages:
- Faster startup and access due to no moving parts
- Seek time is very less when compared to normal HDD.
- Data throughput is very much higher when compared to normal HDD.
- Uses low power and silient during all operations
- High mechanical reliability
- Endures high shocks, temperature, altitudes and vibrations
Disadvantages:
- Expencive
- Low capacity at same form factor
- Asymmetric performance
- Limited lifetimes - limted number of write opeartions
SSD architecture and types:
- SSD is of two types: NAND flash nonvolatile memory and DRAM volatile memory
NAND flash nonvolatile memory
- N-channel MOSFET again - Its the building block of NAND flash nonvolatile memory, required at 1 per cell.
- Nand based SSD uses non volatile flash memory and does not need a battery to retain the data.
- Flash based SSD are slower than DRAM based SSD.
- SSD work by directly writing into flash memroy - NAND Gates/cells.
- Data is written into cells at 1 bit at a time
- Cells are arranged into pages and these are grouped into blocks
- Pages ranges from 512 bytes to 4096 bytes
- Blocks ranges from 32 to 128 pages
- So a block can be anywhere between 16KB to 512KB
- Block size is important factor for Flash drive to work
- Data is written into drive as one bit at a time but is deleted at block level - block by block
- Block is marked BAD if the performance is dropped below normal acceptable level
- Data is moved avay from BAD blocks
- Writing data to SSD is sequencital just like magnetic tapes and optical devices.
- Fastest SSD
- Incorprates a builtin battery or will have an uninteruptted power supply
- Uses DRAM for data storage
- While is the power is off, data in RAM is copied to backup storage and soon after the power is restored the data is copied back to main RAM.
- Its like a SWAP space
- SSD Controller
- Processor - Firmware execution, garbage cleaning, caching and security functions
- ECC - Error correction code - Data error detection and correction
- Flash controller - For standard NAND gates I/O operations
- I/O Controller - SATA controller - External native hardware interface ( can be SAS also)
- Controller memory - ROM - used by controller for program execution
- Cache memory - for intermediate caching of data
Where is it used
Vendors and Martket share
20100420
things i forget
1. To change system date and time on linux
date -s "04/20/2010 14:22:00"
2. enable logging on Cisco firewall
logging on
logging timestamp
logging monitor debugging
logging trap informational
logging history critical
logging facility 23
logging device-id ipaddress inside
logging host inside 10.50.8.112
3. MRTG
mkdir /var/www/html/mrtg/devicename
/usr/bin/cfgmaker --global WorkDir:/var/www/html/mrtg/devicename/ --output /etc/mrtg/devicename.cfg snmpstring@devicename
indexmaker --output=/var/www/html/mrtg/devicename/index.html /etc/mrtg/devicename.cfg
env LANG=C /usr/bin/mrtg /etc/mrtg/devicename.cfg
- crontab entry
0-59/5 * * * * env LANG=C /usr/bin/mrtg /etc/mrtg/devicename.cfg
4. How to view .pcap files
tcpdump -ttttnnr tcp_dump.pcap
date -s "04/20/2010 14:22:00"
2. enable logging on Cisco firewall
logging on
logging timestamp
logging monitor debugging
logging trap informational
logging history critical
logging facility 23
logging device-id ipaddress inside
logging host inside 10.50.8.112
3. MRTG
mkdir /var/www/html/mrtg/devicename
/usr/bin/cfgmaker --global WorkDir:/var/www/html/mrtg/devicename
indexmaker --output=/var/www/html/mrtg/devicename
env LANG=C /usr/bin/mrtg /etc/mrtg/devicename
- crontab entry
0-59/5 * * * * env LANG=C /usr/bin/mrtg /etc/mrtg/devicename.cfg
4. How to view .pcap files
tcpdump -ttttnnr tcp_dump.pcap
20100329
Intel processor - Qual core, core 2 duo, core 2 quad information
Cores/threads
Cores and threads go hand in hand. Multi-core processors are single chips that contain two or more distinct processors or execution cores in the same integrated circuit. Multi-threading allows each core to work on two tasks at once, thereby letting you do more things simultaneously, producing faster, more efficient results. Now your computer can keep up with even your heaviest multitasking.
As per this understanding, Core 2 Duo will have dual processor with capabale of running 2 X 2 threads
Dual core processor will have dual processor with capable of running 1 X 2 threads
Intel® Smart Cache
Cache is a fast storage area where the processor places frequently accessed data. Smart Cache is Intel’s performance-maximized data storage. It allows each processor core to dynamically utilize up to 100% of available cache and obtain data from the cache at higher throughput rates. By keeping more data closer to the processor for fast execution, overall performance is improved. This is of particular benefit when running rich media titles and games, as well as everyday productivity applications.
Intel Tubo Boost Technology
Available on select models of the all new 2010 Intel® Core™ processor family, Intel® Turbo Boost Technology dynamically redirects power and accelerates performance to match your workload. Previously, unused portions of the chip would be “turned off,” leaving some cores idle. Intel® Turbo Boost Technology reroutes that unused performance to the cores that are active, boosting their performance without wasting power. As a result, you automatically get extra performance whenever you need it, and increased energy efficiency when you don’t.
Intel® Hyper-Threading Technology
Available on all new 2010 Intel® Core™ processor family, Intel® Hyper-Threading Technology delivers more efficient use of processor resources and improved performance on multithreaded software. This allows you to run demanding desktop applications simultaneously while maintaining system responsiveness. For example, Intel® Hyper-Threading Technology helps multimedia enthusiasts create, edit and encode graphically intensive files while running background applications, such as virus protection software, without compromise to performance.
http://www.intel.com/technology/product/demos/multi/demo.htm?iid=tech_multi-core+body_demo
Running applications simultaneously which are of nature:
-- Multiple threaded applications
-- Multiple applications
Intels HT technology enables two threads to be processed in a single processor, allowing parallel partial execution. Ex. thread1 and thead2 are processed in a single processor simultaneously and output are provided simultaneously. This requries HT enabled chipset.
Dual core processors enable two threads to be fully processed in parallel in their own processor cores. Similarly Quad core allows four threads to be processed in parallel simultaneously.
HT on multicore processors allows twice as many threads to be processed in parallel.
Cores and threads go hand in hand. Multi-core processors are single chips that contain two or more distinct processors or execution cores in the same integrated circuit. Multi-threading allows each core to work on two tasks at once, thereby letting you do more things simultaneously, producing faster, more efficient results. Now your computer can keep up with even your heaviest multitasking.
As per this understanding, Core 2 Duo will have dual processor with capabale of running 2 X 2 threads
Dual core processor will have dual processor with capable of running 1 X 2 threads
Intel® Smart Cache
Cache is a fast storage area where the processor places frequently accessed data. Smart Cache is Intel’s performance-maximized data storage. It allows each processor core to dynamically utilize up to 100% of available cache and obtain data from the cache at higher throughput rates. By keeping more data closer to the processor for fast execution, overall performance is improved. This is of particular benefit when running rich media titles and games, as well as everyday productivity applications.
Intel Tubo Boost Technology
Available on select models of the all new 2010 Intel® Core™ processor family, Intel® Turbo Boost Technology dynamically redirects power and accelerates performance to match your workload. Previously, unused portions of the chip would be “turned off,” leaving some cores idle. Intel® Turbo Boost Technology reroutes that unused performance to the cores that are active, boosting their performance without wasting power. As a result, you automatically get extra performance whenever you need it, and increased energy efficiency when you don’t.
Intel® Hyper-Threading Technology
Available on all new 2010 Intel® Core™ processor family, Intel® Hyper-Threading Technology delivers more efficient use of processor resources and improved performance on multithreaded software. This allows you to run demanding desktop applications simultaneously while maintaining system responsiveness. For example, Intel® Hyper-Threading Technology helps multimedia enthusiasts create, edit and encode graphically intensive files while running background applications, such as virus protection software, without compromise to performance.
http://www.intel.com/technology/product/demos/multi/demo.htm?iid=tech_multi-core+body_demo
Running applications simultaneously which are of nature:
-- Multiple threaded applications
-- Multiple applications
Intels HT technology enables two threads to be processed in a single processor, allowing parallel partial execution. Ex. thread1 and thead2 are processed in a single processor simultaneously and output are provided simultaneously. This requries HT enabled chipset.
Dual core processors enable two threads to be fully processed in parallel in their own processor cores. Similarly Quad core allows four threads to be processed in parallel simultaneously.
HT on multicore processors allows twice as many threads to be processed in parallel.
20091112
20091029
storage disks, io, performance, throughput - SATA,SAS,iSCSI,FC
Disk drives
SATA
http://www.sata-io.org/technology/why_sata.asp
Data transfer rate - Direct SATA - Internally connected
I 1.5 gigabits per second (150 MB/s)
II 3.0 gigabits per second (300 MB/s)
III 6.0 gigabits per second (600 MB/s)
eSATA - External SATA
http://www.sata-io.org/technology/esata.asp
http://www.sata-io.org/images/eSATA-logo-1.5Gbs_Color.gif
Comparison of Interface speeds and data transfer rates for external disk drive interfaces
USB2 1394 Serial
Raw Interface Speed 480Mbps 400Mbps 1500Mbps
Benchmark Comparison 64K read 31.6 MB/sec 34.8MB/sec 42.4MB/sec
Benchmark comparison 64K write 26.5 MB/sec 26.7MB/sec 56.2MB/sec
Burst Transfer Rate 33.5MB/sec 36.2MB/sec 111.3MB/sec
Superior Link Utilization: Today, an average hard drive operating off its rotating media
(not its cache) might sustain 80 MB/s, a figure much lower than the theoretical maximum
throughput of ~600 MB/s offered by SATA 6Gb/s. With support for up to 15
drives, SATA’s unique port multiplier capabilities enable users to aggregate multiple
drives behind a single SATA port in order to fully utilize host link capacity. In this way,
data across several drives appears as a single logical bank of data. Port multipliers help
to relieve storage bottlenecks, especially in applications such as entry-level servers and
high-bandwidth applications like video post-production.
SAS
http://www.scsita.org/aboutscsi/sas/SAS_roadmap.html
Ultra 320 SCSI
SAS I 3 Gbps
SAS II 6 Gbps ( back ward compatible) - at present
SAS III 12Gbps
1. What is the definition of Serial Attached SCSI?
Serial Attached SCSI (SAS) is the logical evolution of SCSI that satisfies the enterprise data center requirement for scalability, performance, reliability and manageability, while leveraging a common electrical and physical interface with Serial ATA (SATA). This compatibility provides users with unprecedented choices for server and storage subsystem deployment.
2. Why was Serial Attached SCSI developed?
was developed to address I/O and direct attach storage requirements that traditional parallel SCSI cannot meet. It provides universal interconnect with SATA, while offering logical SCSI compatibility along with SCSI reliability, performance and manageability.
http://www.scsita.org/aboutscsi/sas/STA_6G_SAS.pdf
Some of the benchmark results are here
Access Time: 7.6 ms
Max Read: 141.6 MB/s Min Read: 54.5 MB/s Average Read: 119.6 MB/s
SAS System:
Access Time: 5.8 ms
Max Read: 196.0 MB/s Min Read: 117.9 MB/s Average Read: 172.1 MB
SATA WD Caviar Black 1TB Drive:
Access Time: 12.5 ms
Max Read: 108.6 MB/s Min Read: 52.9 MB/s Average Read: 85.1 MB/s
Disk enclosures/Storage
iSCSI
http://tools.ietf.org/html/rfc3720
still to come.... wait for this.
SATA
http://www.sata-io.org/technology/why_sata.asp
Data transfer rate - Direct SATA - Internally connected
I 1.5 gigabits per second (150 MB/s)
II 3.0 gigabits per second (300 MB/s)
III 6.0 gigabits per second (600 MB/s)
eSATA - External SATA
http://www.sata-io.org/technology/esata.asp
http://www.sata-io.org/images/eSATA-logo-1.5Gbs_Color.gif
Comparison of Interface speeds and data transfer rates for external disk drive interfaces
USB2 1394 Serial
Raw Interface Speed 480Mbps 400Mbps 1500Mbps
Benchmark Comparison 64K read 31.6 MB/sec 34.8MB/sec 42.4MB/sec
Benchmark comparison 64K write 26.5 MB/sec 26.7MB/sec 56.2MB/sec
Burst Transfer Rate 33.5MB/sec 36.2MB/sec 111.3MB/sec
Superior Link Utilization: Today, an average hard drive operating off its rotating media
(not its cache) might sustain 80 MB/s, a figure much lower than the theoretical maximum
throughput of ~600 MB/s offered by SATA 6Gb/s. With support for up to 15
drives, SATA’s unique port multiplier capabilities enable users to aggregate multiple
drives behind a single SATA port in order to fully utilize host link capacity. In this way,
data across several drives appears as a single logical bank of data. Port multipliers help
to relieve storage bottlenecks, especially in applications such as entry-level servers and
high-bandwidth applications like video post-production.
SAS
http://www.scsita.org/aboutscsi/sas/SAS_roadmap.html
Ultra 320 SCSI
SAS I 3 Gbps
SAS II 6 Gbps ( back ward compatible) - at present
SAS III 12Gbps
1. What is the definition of Serial Attached SCSI?
Serial Attached SCSI (SAS) is the logical evolution of SCSI that satisfies the enterprise data center requirement for scalability, performance, reliability and manageability, while leveraging a common electrical and physical interface with Serial ATA (SATA). This compatibility provides users with unprecedented choices for server and storage subsystem deployment.
2. Why was Serial Attached SCSI developed?
was developed to address I/O and direct attach storage requirements that traditional parallel SCSI cannot meet. It provides universal interconnect with SATA, while offering logical SCSI compatibility along with SCSI reliability, performance and manageability.
http://www.scsita.org/aboutscsi/sas/STA_6G_SAS.pdf
Results
SCSI System:Access Time: 7.6 ms
Max Read: 141.6 MB/s Min Read: 54.5 MB/s Average Read: 119.6 MB/s
SAS System:
Access Time: 5.8 ms
Max Read: 196.0 MB/s Min Read: 117.9 MB/s Average Read: 172.1 MB
SATA WD Caviar Black 1TB Drive:
Access Time: 12.5 ms
Max Read: 108.6 MB/s Min Read: 52.9 MB/s Average Read: 85.1 MB/s
Disk enclosures/Storage
MD3000/MD3000i - DELL
MD3000i 48MB/s - throughput
http://tools.ietf.org/html/rfc3720
still to come.... wait for this.
20090818
Windows File Extension details
http://filext.com/alphalist.php
Do honor the copy rights of the owner. Do not copy/paste from the above link.
Do honor the copy rights of the owner. Do not copy/paste from the above link.
Cisco - Router Time based QOS with ACL
!--------------------------------------------------------------------
! Time based QOS with acl on Cisco Routers
!
! Comments : rajshekar.j@gmail.com
! The following examples allows you to create QOS on both interface
! of gateway router. With this QOS you will be able to dedicated minimum
! amount of bandwidth to end users and allow them to peak if free bandwidth
! is available also include a time range during which you can increase their
! bandwidth to a greater extent. We have defined two range time range - time_high
! and time_low. During Time range time_high, end users will be given higher
! bandwidth and during time range time_low, end user will be having a very
! lower bandwidth
! We have tested this on Cisco Router with two ethernet interfaces.
!-------------------------------------------------------------------------
!
! time ranges are defined here.
time-range time_high
periodic weekdays 08:00 to 20:00
time-range time_low
periodic weekdays 20:01 to 07:59
!
!Access control lists for both inbound traffic and outbound are defined here
!Fastethernet 0/0 - External facing interface
ip access-list extended acl_inbound_high
permit ip any host time-range time_high
!
ip access-list extended acl_inbound_low
permit ip any host time-range time_low
!
! Fastthernet 0/1 - Internal facing interface
ip access-list extended acl_outbound_high
permit ip host any time-range time_high
!
ip access-list extended acl_outbound_low
permit ip host any time-range time_low
!
!
!class map for inbound traffic are defined here.
class-map match-all class_high-in
match access-group name acl_inbound_high
class-map match-all class_low-in
match access-group name acl_inbound_low
!
!
!Policy map - QOS for inbound traffic
policy map QOS-in
class class_high-in
bandwidth 1024
shape average 1024000
class class_low-in
bandwidth 64
shape average 64000
!
! class map for outbound traffic are defined here.
!
class-map match-all class_high-out
match access-group name acl_outbound_high
class-map match-all class_low-out
match access-group name acl_outbound_low
!
!
!Policy map - QOS for outbound traffic
policy map QOS-out
class class_high-out
bandwidth 1024
shape average 1024000
class class_low-out
bandwidth 64
shape average 64000
!
! Do not forget to apply this QOS policies on outbound traffic of both interfaces of router.
! Time based QOS with acl on Cisco Routers
!
! Comments : rajshekar.j@gmail.com
! The following examples allows you to create QOS on both interface
! of gateway router. With this QOS you will be able to dedicated minimum
! amount of bandwidth to end users and allow them to peak if free bandwidth
! is available also include a time range during which you can increase their
! bandwidth to a greater extent. We have defined two range time range - time_high
! and time_low. During Time range time_high, end users will be given higher
! bandwidth and during time range time_low, end user will be having a very
! lower bandwidth
! We have tested this on Cisco Router with two ethernet interfaces.
!-------------------------------------------------------------------------
!
! time ranges are defined here.
time-range time_high
periodic weekdays 08:00 to 20:00
time-range time_low
periodic weekdays 20:01 to 07:59
!
!Access control lists for both inbound traffic and outbound are defined here
!Fastethernet 0/0 - External facing interface
ip access-list extended acl_inbound_high
permit ip any host
!
ip access-list extended acl_inbound_low
permit ip any host
!
! Fastthernet 0/1 - Internal facing interface
ip access-list extended acl_outbound_high
permit ip host
!
ip access-list extended acl_outbound_low
permit ip host
!
!
!class map for inbound traffic are defined here.
class-map match-all class_high-in
match access-group name acl_inbound_high
class-map match-all class_low-in
match access-group name acl_inbound_low
!
!
!Policy map - QOS for inbound traffic
policy map QOS-in
class class_high-in
bandwidth 1024
shape average 1024000
class class_low-in
bandwidth 64
shape average 64000
!
! class map for outbound traffic are defined here.
!
class-map match-all class_high-out
match access-group name acl_outbound_high
class-map match-all class_low-out
match access-group name acl_outbound_low
!
!
!Policy map - QOS for outbound traffic
policy map QOS-out
class class_high-out
bandwidth 1024
shape average 1024000
class class_low-out
bandwidth 64
shape average 64000
!
! Do not forget to apply this QOS policies on outbound traffic of both interfaces of router.
20090731
I might as well be hanged/hung for a sheep as a lamb
!, I might as well be hanged/hung for a sheep as a lamb.
something that you say when you are going to be punished for something so you decide to do something worse because your punishment will not be any more severe
Usage notes: In the past, people who stole lambs were killed, so it was worth stealing something more because there was no worse punishment.
YOU MIGHT AS WELL BE HUNG FOR A SHEEP AS A LAMB’
something that you say when you are going to be punished for something so you decide to do something worse because your punishment will not be any more severe
Usage notes: In the past, people who stole lambs were killed, so it was worth stealing something more because there was no worse punishment.
YOU MIGHT AS WELL BE HUNG FOR A SHEEP AS A LAMB’
20090728
Linux tips - Part 1
# Mounting ISO files on Linux
mkdir /mnt/mountpoint
mount -o loop -t iso9660 filename.iso /mnt/mountpoint
cd /mnt/mountpoing
#
# Certificate generation on linux box
openssl genrsa -des3 -out nameofkey.key 1024
openssl req -new -key nameofkey.key -out nameofkey.csr
openssl req -new -key nameofkey.key -x509 -out nameofkey.crt
## Mounting windows network share on linux system
smb mountsmbmount \\\\hostname.network.com \\username /localmountpoint -o username="username" ,password="password"
## Setting up hostname for http/apache webserver error
echo HOST.DOMAIN.com > /etc/hostname
/bin/hostname -F /etc/hostname
edit /etc/hosts
10.x.y.z \t host.domain.com \t host
restart apache after making changes in /etc/hosts file.
mkdir /mnt/mountpoint
mount -o loop -t iso9660 filename.iso /mnt/mountpoint
cd /mnt/mountpoing
#
# Certificate generation on linux box
openssl genrsa -des3 -out nameofkey.key 1024
openssl req -new -key nameofkey.key -out nameofkey.csr
openssl req -new -key nameofkey.key -x509 -out nameofkey.crt
## Mounting windows network share on linux system
smb mountsmbmount \\\\hostname.network.com \\username /localmountpoint -o username="username" ,password="password"
## Setting up hostname for http/apache webserver error
echo HOST.DOMAIN.com > /etc/hostname
/bin/hostname -F /etc/hostname
edit /etc/hosts
10.x.y.z \t host.domain.com \t host
restart apache after making changes in /etc/hosts file.
GRE tunnel between two linux boxes
host1 - 10.x.y.h1
ip tunnel add interfacegre3 mode gre remote 10.x.y.h2 local 10.x.y.h1
ip addr add 10.0.30.1 dev interfacegre3
ip link set interfacegre3 up
ip route add 10.0.40.0/24 dev interfacegre3
ifconfig interfacegre up
host2 - 10.x.y.h2
ip tunnel add interfacegre4 mode gre remote 10.x.y.h1 local 10.x.y.h2
ip addr add 10.0.40.1 dev interfacegre4
ip link set interfacegre4 up
ip route add 10.0.30.0/24 dev interfacegre4
ifconfig interfacegre up
# use this only to remove the greinterface
ifconfig interfacegre down
ip link set interfacegre down
ip tunnel del interfacegre
ip tunnel add interfacegre3 mode gre remote 10.x.y.h2 local 10.x.y.h1
ip addr add 10.0.30.1 dev interfacegre3
ip link set interfacegre3 up
ip route add 10.0.40.0/24 dev interfacegre3
ifconfig interfacegre up
host2 - 10.x.y.h2
ip tunnel add interfacegre4 mode gre remote 10.x.y.h1 local 10.x.y.h2
ip addr add 10.0.40.1 dev interfacegre4
ip link set interfacegre4 up
ip route add 10.0.30.0/24 dev interfacegre4
ifconfig interfacegre up
# use this only to remove the greinterface
ifconfig interfacegre down
ip link set interfacegre down
ip tunnel del interfacegre
Syslog-ng - mailing options
source s_local { unix_stream("dev/log"); internal(); };
filter f_denials { match("[Dd]enied[Ff]ail"); };
destination d_mailtoraj { program("/usr/local/sbin/mailtoraj.sh"); };
log { source(s_local);
filter(f_denials);
destination(d_mailtoraj); };
#!/bin/bash# mailtoraj.sh#
while read line;
do
echo $line mail -s "Something weirdness on that Linux box" rajs@nowhere.com
done
filter f_denials { match("[Dd]enied[Ff]ail"); };
destination d_mailtoraj { program("/usr/local/sbin/mailtoraj.sh"); };
log { source(s_local);
filter(f_denials);
destination(d_mailtoraj); };
#!/bin/bash# mailtoraj.sh#
while read line;
do
echo $line mail -s "Something weirdness on that Linux box" rajs@nowhere.com
done
Cisco PIX - client access vpn configuration 6.x
vpn name - "nameofvpn"
access-list nonatacl permit ip 192.168.100.0 255.255.255.0 192.168.200.0 255.255.255.0
ip local pool "nameofvpnpool" 192.168.200.1-192.168.200.30
nat (inside) 0 access-list nonatacl
sysopt connection permit-ipsec
crypto ipsec transform-set myset esp-3des esp-md5-hmac
crypto dynamic-map dynmap 20 set transform-set myset
crypto map mymap 20 ipsec-isakmp dynamic dynmap
crypto map mymap client authentication LOCAL
crypto map mymap interface outside
isakmp enable outside
isakmp identity address
isakmp policy 20 authentication pre-share
isakmp policy 20 encryption 3des
isakmp policy 20 hash md5
isakmp policy 20 group 2
isakmp policy 20 lifetime 86400
vpngroup "nameofvpn" address-pool "nameofvpnpool "
vpngroup "nameofvpn" dns-server 192.16b.100.x - ip address of internal/external dns server
vpngroup "nameofvpn" default-domain test1.test.com
vpngroup "nameofvpn" split-tunnel nonatacl
vpngroup "nameofvpn" idle-time 1800
vpngroup "nameofvpn" password "vpngrouppassword"
Those terms within " " - change it according to your requirement along with ipaddress ranges
access-list nonatacl permit ip 192.168.100.0 255.255.255.0 192.168.200.0 255.255.255.0
ip local pool "nameofvpnpool" 192.168.200.1-192.168.200.30
nat (inside) 0 access-list nonatacl
sysopt connection permit-ipsec
crypto ipsec transform-set myset esp-3des esp-md5-hmac
crypto dynamic-map dynmap 20 set transform-set myset
crypto map mymap 20 ipsec-isakmp dynamic dynmap
crypto map mymap client authentication LOCAL
crypto map mymap interface outside
isakmp enable outside
isakmp identity address
isakmp policy 20 authentication pre-share
isakmp policy 20 encryption 3des
isakmp policy 20 hash md5
isakmp policy 20 group 2
isakmp policy 20 lifetime 86400
vpngroup "nameofvpn" address-pool "nameofvpnpool "
vpngroup "nameofvpn" dns-server 192.16b.100.x - ip address of internal/external dns server
vpngroup "nameofvpn" default-domain test1.test.com
vpngroup "nameofvpn" split-tunnel nonatacl
vpngroup "nameofvpn" idle-time 1800
vpngroup "nameofvpn" password "vpngrouppassword"
Those terms within " " - change it according to your requirement along with ipaddress ranges
Cisco PIX - Client access VPN configuration for 7.x
--------------------------------------------------------------------------
global (outside) 1 interface
access-list splittunnelacl standard permit 192.168.160.0 255.255.255.0
access-list nonat-vpnacl extended permit ip 192.168.160.0 255.255.255.0 192.168.165.0 255.255.255.0
ip local pool vpnpool 192.168.165.10-192.168.165.200 mask 255.255.255.0
nat (inside) 0 access-list nonat-vpnacl
nat (inside) 1 0.0.0.0 0.0.0.0
group-policy "vpn-group-policy" internal
group-policy "vpn-group-policy" attributes
dns-server value 192.168.160.x - specify the dns server ipaddress
default-domain value "somenetwork.somewhere.com"
split-tunnel-policy tunnelspecified
split-tunnel-network-list value splittunnelacl
crypto ipsec transform-set my-set esp-3des esp-md5-hmac
crypto dynamic-map dynmap 10 set transform-set my-set
crypto dynamic-map dynmap 10 set reverse-route
crypto map mymap 10 ipsec-isakmp dynamic dynmap
crypto map mymap interface outside
isakmp enable outside
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption 3des
isakmp policy 10 hash md5
isakmp policy 10 group 2
isakmp policy 10 lifetime 1000
tunnel-group "vpn-tunnel-group" type ipsec-ra
tunnel-group "vpn-tunnel-group" general-attributes
address-pool vpnpool
default-group-policy "vpn-group-policy"
tunnel-group "vpn-tunnel-group" ipsec-attributes
pre-shared-key "yourtunnelgrouppassword-enterhere"
Those terms within " " - change it according to your requirement along with ipaddress ranges.
global (outside) 1 interface
access-list splittunnelacl standard permit 192.168.160.0 255.255.255.0
access-list nonat-vpnacl extended permit ip 192.168.160.0 255.255.255.0 192.168.165.0 255.255.255.0
ip local pool vpnpool 192.168.165.10-192.168.165.200 mask 255.255.255.0
nat (inside) 0 access-list nonat-vpnacl
nat (inside) 1 0.0.0.0 0.0.0.0
group-policy "vpn-group-policy" internal
group-policy "vpn-group-policy" attributes
dns-server value 192.168.160.x - specify the dns server ipaddress
default-domain value "somenetwork.somewhere.com"
split-tunnel-policy tunnelspecified
split-tunnel-network-list value splittunnelacl
crypto ipsec transform-set my-set esp-3des esp-md5-hmac
crypto dynamic-map dynmap 10 set transform-set my-set
crypto dynamic-map dynmap 10 set reverse-route
crypto map mymap 10 ipsec-isakmp dynamic dynmap
crypto map mymap interface outside
isakmp enable outside
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption 3des
isakmp policy 10 hash md5
isakmp policy 10 group 2
isakmp policy 10 lifetime 1000
tunnel-group "vpn-tunnel-group" type ipsec-ra
tunnel-group "vpn-tunnel-group" general-attributes
address-pool vpnpool
default-group-policy "vpn-group-policy"
tunnel-group "vpn-tunnel-group" ipsec-attributes
pre-shared-key "yourtunnelgrouppassword-enterhere"
Those terms within " " - change it according to your requirement along with ipaddress ranges.
Subscribe to:
Posts (Atom)